diff options
| author | Guido van Rossum <guido@python.org> | 2002-08-08 19:46:52 (GMT) |
|---|---|---|
| committer | Guido van Rossum <guido@python.org> | 2002-08-08 19:46:52 (GMT) |
| commit | d31a8036fe416bfd68cb4da99db7ffaca2041420 (patch) | |
| tree | e704f9d8c4ab97d69cb440a03414bd2ce1dbfbf6 /Mac/Contrib/PythonDetector/OpenPythonLib | |
| parent | a1a5a89b48177808e82b3858c6b4fa9afdf1c10b (diff) | |
| download | cpython-d31a8036fe416bfd68cb4da99db7ffaca2041420.zip cpython-d31a8036fe416bfd68cb4da99db7ffaca2041420.tar.gz cpython-d31a8036fe416bfd68cb4da99db7ffaca2041420.tar.bz2 | |
Backport of SF patch 590294: os._execvpe security fix (Zack Weinberg).
1) Do not attempt to exec a file which does not exist
just to find out what error the operating system
returns. This is an exploitable race on all platforms
that support symbolic links.
2) Immediately re-raise the exception if we get an
error other than errno.ENOENT or errno.ENOTDIR. This
may need to be adapted for other platforms.
Diffstat (limited to 'Mac/Contrib/PythonDetector/OpenPythonLib')
0 files changed, 0 insertions, 0 deletions